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Box No. I Basis of the report 



1 . With regard to the language, this report is based on the intemational application in the language in which it was filed, unless 
otherwise indicated under this item. 

I I This report is based on translations from the original language into the following language , 
which is the language of a translation furnished for the purposes of: 

I I international search (under Rules 12.3 and 23. 1 (b)) 

I I publication of the intemational ^plication (under Rule 12.4) 

I I iatemational preliminary examination (under Rules 55.2 and/or 55.3) 

2. With regard to the elements of the intemational application, this report is based on (replacement sheets which have been 
furnished to the receiving Office in response to an invitation under Article 14 are referred to in this report as "originally 
filed " and are not annexed to this report) : 

I I tiie intemational application as originally filed/furnished 

|X| the descr^tion: 

pages 1-24 as originally filed/fuinished 
pages* receivedby this Authority on with the letter of 
pages* received by this Authority on with the letter of 



pel the claims: 



pages as originally filed/furnished 

pages* as amended (together with any statement) under Article 1 9 

pages* 25-31 received by this Audiority on 8 August 2005 with the letter of 2 August 2005 
received by this Authority on with the letter of 



|X| tiie drawings: 

pages 1-4 as originally filed/fumished 

pages* receivedbythis Authority on with the letter of 

pages* receivedbythis Authority on with tiie letter of 

r~1 a sequence listing and/or any related table(s) - see Supplemental Box Relating to Sequence Listmg. 
I I The amendments have resulted in the cancellation of: 

I I tiie description, pages 

I I the clainos, Nos. 

I I die drawings, sheets/figs 

I I the sequence listing (5/?ec0^): 

I I any table(s) related to die sequence listmg (f/^eci)^;): 

I I This report has been established as if (some of) the amendments annexed to this report and hsted below had not been 
made, since they have been considered to go beyond the disclosmre as filed, as indicated in the Supplemental Box (Rxile 
70.2(c)). 

I I the descrq>tion, pages ■ 

I I the claims, Nos. 

I I the drawings, sheets/figs 

I I ttie sequence listmg {specify): 

I I any table(s) related to flie sequence listing (specify): 
If item 4 applies, some or all of those sheets may be marked "superseded. " 
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Box No. V Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial applicability; 
citations and explanations supporting such statement 



1. Statement 



Novelty (N) 


Claims 


1-17 


YES 




Claims 


None 


NO 


Inventive step (IS) 


Claims 


1-17 


YES 




Claims 


None 


NO 


Industrial applicability (lA) 


Claims 


1-17 


YES 




Claims 


None 


NO 



2. Citations and esqplanations (Rule 70.7) 

Following documents were cited in the International Search Report: 
Dl : WO 2000/049768 Al (MTTTELHOLZER) 24 August 2000 
D2: US 2002/0076042 Al (SANDHU et al.) 20 June 2002 
D3: US 5905799 A (GANESAN) 18 May 1999 

None of the above prior art docxmients discloses a method of cryptographically processing a message including 
determining refreshed decomposition at selected times and after or before the message is processed as specified 
in claims 1-17. 

The claims me^t the criteria set out in PCT Articles 33(2-4). 



INTERNATIONAL PRELIMINARY REPORT ON PATENTABILITY 



Forni PCT/IPEA/409 (Box No, V) (January 2004) 



25 

Claxms 

1. Method for cryptographically processing a message, 
wherein - a first partial cryptographic key and a second 
partial cryptographic key, which correspond to a 
decomposition of a private cryptographic key^ are used; 

the message is processed using the first partial 
cryptographic key resulting in a first partially processed 
message; 

the message is processed using the second partial 
cryptographic key resulting in a second partially processed 
message; 

- the first partially processed message and the second 
partially processed message are combined resulting in a 
cryptographically processed message, 

wherein further at selected times and after or before the 
message is processed, a refreshed decomposition is 
determined and wherein the refreshed decomposition is 
determined by decomposing the first partial cryptographic 
key and the, second partial cryptographic key and combining 
these decompositions to form a decomposition of the private 
cryptographic key, 

2. The method according to claim 1, wherein the processing 
of the message using the first partial cryptographic key is 
carried out by a first computer and the processing of the 
message using the second partial cryptographic key is 
carried out by a second computer. 

3. The method according to claim 2, wherein the first and 
the second computer are coupled via a computer network. 
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4. The method according to claim 2 or claim 3^ wherein the 
method further comprises the step of transmitting the 
message from the first computer to the second computer. 

5. The method according to any of the claims 1 to 4, 
wherein the first partial cryptographic key and the second 
partial cryptographic key correspond to a decomposition of 
the private cryptographic key into a plurality of partial 
cryptographic keys. 

6. The method according to claim 5^ wherein the plurality 
of. partial cryptographic keys give, when summed, the 
private cryptographic key. 

7. The method according to any of the claims 1 to 6, 
wherein the cryptographical processing of the message is 
the signing of the message or the decrypting of a message. 

8. The method according to any of the claims 1 to 7, 
wherein the message is processed according to a public key 
cryptographic algorithm. 

9. The method according to claim 8, wherein the public key 
cryptographic algorithm is the RSA algorithm. 

10- Computer system comprising 

- a first processin-g unit which is adapted to process a 
message using a first partial cryptographic key, which 
corresponds to a decomposition of a private cryptographic 
key, resulting in a first partially processed message; 

- a second processing unit which is adapted to process a 
message using a second partial cryptographic key, which 
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corresponds to the decomposition of • the private 
cryptographic key, resulting in a second partially 
processed message; 

- a combining unit which is adapted to combine the first 
partially processed message and the second partially 
processed message resulting in a cryptographically 
processed message, 

wherein further at selected times and after or before the 
message is processed, a refreshed decomposition is 
determined, wherein the refreshed decomposition is 
determined by decomposing the first partial cryptographic 
key and the second partial cryptographic key and. combining 
these decompositions to form a decomposition of the private 
cryptographic key. 

11. Method for generating a cryptographically processed 
message wherein 

a message is processed using a first partial 
cryptographic key, which corresponds to a decomposition of 
a private cryptographic key, resulting in a first partially 
processed message; 

- the message is transmitted to a client computer; 

- a second partially processed message is received which is 
the message processed using a second partial cryptographic 
key which corresponds to the decomposition of the private 
cryptographic key; 

- the first partially processed message and the second 
partially processed message . are combined to a 
cryptographically processed message, 

wherein further at selected times and after or before the 
message is processed, a refreshed decomposition is 
determined, wherein the refreshed decomposition is 
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determined by decomposing the first partial cryptographic 
key and the second partial cryptographic key and combining 
these decompositions to form a decomposition of the private 
cryptographic key. 

12 • Server computer comprising 

- a processing unit which is adapted to process a message 
using a first partial cryptographic key, which corresponds 
to a decomposition of a private cryptographic key, 
resulting in a first partially processed message; 

- a transmitting unit which is- adapted to send the message 
to a client computer; 

- a receiving unit which is adapted to receive a second 
partially processed message which is the message processed 
using a second partial cryptographic key which corresponds 
to the decomposition of the private cryptographic key; 

- a combining unit which is adapted to combine the first 
partially processed message and the second partially 
processed message to a cryptographically processed message, 
wherein further * at selected times and after or before the 
message is processed, a refreshed decomposition is 
determined, wherein the refreshed decomposition is 
determined by decomposing the first partial cryptographic 
key and the second partial cryptographic key and combining 
these decompositions to form a decomposition of the private 
cryptographic key. 

13. Method for performing a cryptographic operation on a 
message, wherein 

- a message is received; 

- the . message is processed using a partial cryptographic 
key which corresponds to a decomposition of a private 
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cryptographic key resulting in a partially processed 
message; 

the partially processed message is transmitted to a 
server computer, 

wherein further at selected times and after or before the 
message is processed, a refreshed decomposition is 
determined. 

14. Client computer comprising 

- a receiving unit which is adapted to receive a message; 

- a processing unit which is adapted to process the message 
using a partial cryptographic key which corresponds to a 
decomposition of a private cryptographic key resulting in a 
partially processed message; 

- a transmitting unit which is adapted to transmit the 
partially processed message to a server computer, 

wherein further at selected times and after or before the* 
message is processed, a refreshed decomposition is 
determined. 

15. Computer program element which, when executed by a 
computer, makes the computer perform the following steps 

- processing a message using a first partial cryptographic 
key which corresponds to a decomposition of a private 
cryptographic key, resulting in a first partially processed 
message; 

- processing the message using the second partial 
cryptographic key which corresponds to the decomposition of 
the private cryptographic key resulting in a second 
partially processed message; 
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- combining the first partially processed message and the 
second partially processed message resulting in a 
cryptographically processed message, 

wherein further at selected times and after or before the 
message is processed, a refreshed decomposition is 
determined, wherein the refreshed decomposition is 
determined by decomposing the first partial cryptographic 
key and the second partial cryptographic key and coinbining 
these decompositions to form a decomposition of the private 
cryptographic key. 

16. Computer program element which, when executed by a 
computer, makes the computer perform the following steps 

- processing a message using a first partial cryptographic 
key which corresponds to a decomposition of a private 
cryptographic key resulting in a first partially processed 
message; 

- transmitting the message to a client computer; 

- receiving a second partially processed message which is 
the message processed using a second partial cryptographic 
key which corresponds to the decomposition of the private 
cryptographic key; 

- combining the first partially processed message and the 
second partially processed message to a cryptographically 
processed message, 

wherein further at selected times and after or before the 
message is processed, a refreshed decomposition is 
determined, wherein the refreshed decomposition is 
determined by decomposing the first partial cryptographic 
key and the second partial cryptographic key and combining 
these decompositions to form a decomposition of the private 
cryptographic key. 



Amended Sheet 
IPjEA/AU 



31 



17. Computer program element which, when executed by a 
computer, makes the computer perform the following steps 

- receiving a message; 

- processing the message using a partial cryptographic key 
which corresponds to a decomposition of a private 
cryptographic key resulting in a partially processed 
message; 

- transmitting the partially processed message to a server 
computer, 

wherein further at selected times and after, or before the 
message is processed, a refreshed decomposition is 
determined. 
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